Privacy Policy

1. Data Controller

The party responsible for data processing on this website is:

Friseur am Bahnhof · Ferit Tek Friedrichstraße 1, 63225 Langen (Hessen), Germany Phone: +49 6103 502550 Email: info@friseur-langen.de

2. General

We take the protection of your personal data seriously and comply with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). We only process the data required to operate the website and to arrange appointments.

There is no tracking and no advertising-related analysis of your behaviour. We do not embed any analytics or advertising services and no social networks.

3. Hosting

This website is hosted by Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On our behalf, Vercel processes the technical access data (see server log files) in order to deliver and secure the website.

The legal basis is our legitimate interest in a secure and efficient provision of the website (Art. 6 (1) (f) GDPR). A data processing agreement is in place with Vercel. As processing may also take place on servers in the USA, the transfer is based on the EU-US Data Privacy Framework and the EU Commission's Standard Contractual Clauses.

4. Server Log Files

When you access the website, information is automatically stored in server log files that your browser transmits: IP address, date and time of access, the page requested, browser and operating system used, and the previously visited page (referrer).

This data is used for technical delivery, stability and security of the website and is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR. It is stored only for as long as necessary to achieve these purposes.

5. Cookies & Local Storage

We do not use any tracking or marketing cookies. For this reason there is also no cookie banner on this website.

We store technically necessary information locally in your browser: your chosen colour scheme (light/dark) and – if you log in – your login session. This storage is required for the website to function (Art. 6 (1) (f) GDPR) and is not evaluated for advertising purposes.

6. Online Booking (eTermin)

For online appointment booking with Daniel we use the service eTermin (etermin.net). When you book online, the data you provide – first and last name, email address, phone number as well as the chosen service, date and time – is transmitted to eTermin and processed there to manage your appointment. eTermin acts as our processor.

The legal basis is the performance of the contract entered into with the booking or pre-contractual measures (Art. 6 (1) (b) GDPR). Appointments with Ferit are arranged exclusively by phone; no data is collected via this website in that case.

7. Customer Account & Appointment Management (Firebase)

You can optionally create a customer account to manage your appointments and details. Sign-in is handled via Google Firebase Authentication (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; possibly Google LLC, USA). This processes your email address and an encrypted password. Your profile data (name, email, phone number) and your booked appointments are stored in Google Cloud Firestore in the region europe-west3 (Frankfurt am Main, EU).

The legal basis is your consent when creating the account (Art. 6 (1) (a) GDPR) and the performance of the contract (Art. 6 (1) (b) GDPR). For the authentication service, a transfer to Google LLC in the USA may occur; this is safeguarded by the EU-US Data Privacy Framework and the Standard Contractual Clauses.

You can delete your account yourself at any time in the account area. This removes the profile and appointment data stored there.

8. Email Confirmations

To confirm and remind you of your appointment, we send emails via our booking system eTermin (etermin.net). This processes your email address and appointment data. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR).

9. Contacting Us

If you contact us via the contact form, by email or by phone, we process the data you provide (e.g. name, email address, your request) in order to handle your enquiry. The contact form opens your local email application; the message is sent to us as an ordinary email. The legal basis is Art. 6 (1) (b) or (f) GDPR.

10. Retention Period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention periods. Appointment data is deleted after the appointment has been handled, unless commercial or tax retention obligations apply. Account data is stored until you delete your account.

11. Your Rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR). Please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information (datenschutz.hessen.de).

12. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar and the padlock symbol.

13. Changes to this Privacy Policy

We adjust this privacy policy when the legal situation, our services or our data processing change. The current version published on this page always applies.